Scalable Vector Grief

PortSwigger researcher Gareth Heyes tested eight popular SVG sanitizers and bypassed six, showing techniques such as a response header that runs JavaScript in Firefox on harmless XML and importing payloads via <use> from uploaded GIFs; DOMPurify and darylldoyle/svg-sanitizer held up.

Research · Security · Web Development

2026 Ruby on Rails Community Survey Results

Planet Argon's ninth Ruby on Rails Community Survey since 2009 gathers answers from nearly 1,800 developers in 80 countries on Ruby and Rails versions, upgrades, gems, JavaScript, security, deployment, databases, editors and, new this year, how teams use and feel about AI.

Research · Ruby on Rails · Ruby · Developer Surveys · Web Development

Bez: Generating a browser engine from specs and testsA generated web rendering engine verified against Chromium, Firefox, and WebKit

Bez generates Rust web-engine code from specifications, admitting candidates only when three shipping browsers agree on geometry—aiming for complete or content-scoped engines that update by regeneration.

Research · Open Source · Web Development · Research · Programming